diff --git a/systems/nixos/services/hydra/default.nix b/systems/nixos/services/hydra/default.nix
index 156f62e5..f8926f63 100644
--- a/systems/nixos/services/hydra/default.nix
+++ b/systems/nixos/services/hydra/default.nix
@@ -14,7 +14,7 @@
 
   services.tsnsrv.services.hydra = {
     ephemeral = true;
-    authKeyPath = "/run/credentials/tsnsrv-hydra.service/credentials";
+    authKeyPath = config.sops.secrets.tailscale-authkey.path;
     toURL = config.services.hydra.hydraURL;
   };
 
diff --git a/systems/nixos/services/miniflux/default.nix b/systems/nixos/services/miniflux/default.nix
index 6da7369a..0f4d79ec 100644
--- a/systems/nixos/services/miniflux/default.nix
+++ b/systems/nixos/services/miniflux/default.nix
@@ -10,7 +10,7 @@
 
   services.tsnsrv.services.rss-reader = {
     ephemeral = true;
-    authKeyPath = "/run/credentials/tsnsrv-rss-reader.service/credentials";
+    authKeyPath = config.sops.secrets.tailscale-authkey.path;
     toURL = "http://127.0.0.1:${config.services.miniflux.config.PORT}";
   };